[Coco] Someones bots are abusing my downloads

Dave Philipsen dave at davebiz.com
Fri Nov 1 21:18:02 EDT 2019


Just any FYI. If you’re running dd-wrt on your router there is a very good possibility it has iptables. Every dd-wrt installation I’ve ever played around with did. And if your server is on a Raspberry-Pi running raspbian then it’s pretty easy to install if it doesn’t already have it. 

Dave


> On Nov 1, 2019, at 4:46 PM, Gene Heskett <gheskett at shentel.net> wrote:
> 
> On Friday 01 November 2019 15:46:25 Dave Philipsen wrote:
> 
>> A little iptables work should solve your problem.
> 
> No iptables except what in the router, which is dd-wrt. But listing their 
> addy in CIDR format in hosts.deny is a bunch easier and seems to be 
> working. I just wish it was keeping a log so I could see the reaction 
> when there was a hit. And bingbot just came to the party.  And yandex is 
> hammering at 1 second intervals but no response is being issued.
> 
> And its a good thing I made coffee an hour back, now we have no water in 
> this neighborhood. No biggie for a few hours, plenty in the fridge for 
> my crippled missus.
> 
> Thanks Dave, this stuff keeps me out of the bars.
>> 
>>> On Nov 1, 2019, at 12:54 PM, Bill Gunshannon
>>> <bill.gunshannon at hotmail.com> wrote:
>>> 
>>> On 11/1/19 1:49 PM, Ken Flanagan wrote:
>>>>> On Fri., Nov. 1, 2019, 10:35 a.m. Gene Heskett,
>>>>> <gheskett at shentel.net> wrote:
>>>>> 
>>>>> They ae not just indexing my place, they were sucking the whole
>>>>> thing, one file at a time and keeping my 250 kilobaud uplink
>>>>> bandwidth full for the last 4 or so hours.  That a DDOS AFAIAC.
>>>>> Kill them on sight. Here is typical log entry:
>>>>> 
>>>>> coyote.coyote.den:80 46.229.168.141 - -
>>>>> [01/Nov/2019:13:33:16 -0400] "GET
>>>>> /gene/nitros9/3rdparty/packages/uucpbb/doc/uucp.man
>>>>> HTTP/1.1" 200 3142 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl;
>>>>> +http://www.semrush.com/bot.html)"
> 
> 
> Cheers, Gene Heskett
> -- 
> "There are four boxes to be used in defense of liberty:
> soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author)
> If we desire respect for the law, we must first make the law respectable.
> - Louis D. Brandeis
> Genes Web page <http://geneslinuxbox.net:6309/gene>
> 
> -- 
> Coco mailing list
> Coco at maltedmedia.com
> https://pairlist5.pair.net/mailman/listinfo/coco



More information about the Coco mailing list